Skip to content

Riksdagsmonitor v0.9.13

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 May 13:59
· 1435 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.9.13
caa0809

What's Changed

📚 Documentation

🧪 Testing

⚡ Performance

🌐 Internationalization

🔧 Maintenance

  • chore(deps-dev): bump start-server-and-test from 3.0.4 to 3.0.5 in the development-dependencies group @dependabot[bot] (#2448)
  • drop SRI + integrity checks, pin assets/styles.css to stable filename, skip Mermaid in minify-dist @copilot-swe-agent[bot] (#2439)
  • chore(deps): bump cypress from 15.14.2 to 15.15.0 in the production-dependencies group @dependabot[bot] (#2438)
  • chore(deps-dev): bump knip from 6.13.0 to 6.13.1 in the development-dependencies group @dependabot[bot] (#2437)

📦 npm Package

Shared types, theme system, and dashboard utilities are available as an npm package with provenance:

npm install riksdagsmonitor
import {
  DARK_THEME_COLORS, LIGHT_THEME_COLORS,
  getActiveThemeColors, getPartyColor,
  CHART_PALETTE, BREAKPOINTS,
} from 'riksdagsmonitor';

npm

📊 Release Metrics & Evidence

Test Coverage
API Documentation
E2E Tests
Dependencies

All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.

🔐 Security & Supply Chain Protection

SLSA Level 2+
OpenSSF Scorecard

This release includes:

  • ✅ SLSA Build Provenance Attestations - Cryptographically signed build provenance
  • ✅ Software Bill of Materials (SBOM) - Complete dependency inventory in SPDX format
  • ✅ SHA-256 Checksums - All artifacts include checksums for integrity verification
  • ✅ npm Provenance - npm package published with verified provenance attestation
  • ✅ CodeQL Security Scanning - Automated vulnerability detection
  • ✅ Dependency Scanning - Continuous vulnerability monitoring with Dependabot

Verify attestations:

gh attestation verify riksdagsmonitor-0.9.13.zip -R Hack23/riksdagsmonitor
npm audit signatures

Browse attestations: View all attestations

📋 ISMS Compliance & Policies

Hack23 ISMS
Information Security Policy
Open Source Policy
Secure Development

Compliance Frameworks

ISO 27001:2022
NIST CSF 2.0
CIS Controls v8.1

Riksdagsmonitor follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.

🏗️ Architecture Documentation

Current State Future State
Architecture Future Architecture
Security Architecture Future Security
Threat Model Future Threat Model
Data Model Future Data Model
Flowchart Future Flowchart
State Diagram Future State Diagram
Mindmap Future Mindmap
SWOT Future SWOT

📦 Release Artifacts

Artifact Description Verification
riksdagsmonitor-0.9.13.zip Production build SHA-256 checksum, SLSA attestation
riksdagsmonitor-0.9.13.zip.sha256 SHA-256 checksum Compare with sha256sum
riksdagsmonitor-0.9.13.spdx.json SBOM (SPDX format) SBOM attestation
*.intoto.jsonl SLSA attestations gh attestation verify
riksdagsmonitor (npm) npm package npm audit signatures

🚀 Deployment

🌐 Hack23 Ecosystem

Platform Live Site API Docs Repository
Riksdagsmonitor riksdagsmonitor.com API GitHub
EU Parliament MCP euparliamentmonitor.com API GitHub
CIA Compliance Manager ciacompliancemanager.com API GitHub
Black Trigram blacktrigram.com API GitHub
CIA Platform — — GitHub
ISMS Public — — GitHub

🏗️ Built With

  • Node.js: 26.x
  • Vite: 8.x
  • Chart.js: 4.5.x
  • D3.js: 7.9.x
  • Vitest: 4.x
  • Cypress: 15.x
  • TypeScript: 6.x

👥 Contributors

@Copilot, @dependabot[bot], @github-actions[bot], @pethers, copilot-swe-agent[bot], dependabot[bot] and github-actions[bot]

Full Changelog: v0.9.11...0.9.13

📦 Release Artifacts

  • riksdagsmonitor-v0.9.13.zip - Production build
  • riksdagsmonitor-v0.9.13.zip.sha256 - Checksum for verification
  • riksdagsmonitor-v0.9.13.spdx.json - SBOM (Software Bill of Materials)
  • *.intoto.jsonl - SLSA Build Provenance Attestations

📦 npm Package

Shared types, theme system, and utilities are available as an npm package:

npm install riksdagsmonitor

📚 Documentation

🔐 Security

All artifacts include SLSA Build Provenance attestations and SBOM for supply chain security.
Verify attestations using the GitHub CLI:

gh attestation verify riksdagsmonitor-v0.9.13.zip -R Hack23/riksdagsmonitor

Contributors

pethers and dependabot
Assets 8
Loading